Lucene search
MitreCVE-2004-2563HistoryNov 22, 2005 - 2:00 a.m.
CVE-2004-2563
2005-11-2202:00:00
mitre
web.nvd.nist.gov
30
serena teamtrack
remote attacks
information disclosure
xss
security vulnerability
CVSS2
5.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
AI Score
5.9
Confidence
High
EPSS
0.01
Percentile
83.7%
Serena TeamTrack 6.1.1 allows remote attackers to obtain sensitive information such as user names, versions, and database information, and conduct cross-site scripting (XSS) attacks, via a direct request to tmtrack.dll with modified LoginPage and Template parameters.
Affected configurations
Node
serena_softwareserena_teamtrackMatch6.1.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| serena_software | serena_teamtrack | 6.1.1 | cpe:2.3:a:serena_software:serena_teamtrack:6.1.1:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2004-2563
2005-11-22 02:00:00
exploitdb
exploitdb
Serena TeamTrack 6.1.1 - Remote Authentication Bypass
2004-07-21 00:00:00
nvd
nvd
CVE-2004-2563
2004-12-31 05:00:00
CVSS2
5.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
AI Score
5.9
Confidence
High
EPSS
0.01
Percentile
83.7%
Related for CVE-2004-2563